<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>XEUS Blog</title>
    <link>https://www.xeus.io/blog</link>
    <description>Demonstrated attack paths, frontier AI offense, and continuous testing for teams that ship daily. No reprinted advisories.</description>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 00:00:00 GMT</lastBuildDate>
    <atom:link href="https://www.xeus.io/blog/rss.xml" rel="self" type="application/rss+xml"/>
    <item>
      <title>What Is Agentic Pentesting?</title>
      <link>https://www.xeus.io/blog/what-is-agentic-pentesting</link>
      <guid isPermaLink="true">https://www.xeus.io/blog/what-is-agentic-pentesting</guid>
      <pubDate>Fri, 02 Oct 2026 00:00:00 GMT</pubDate>
      <description>Agentic pentesting is goal-directed, adaptive OffSec under authorized scope. How it differs from scanners and traditional pentests, and what good looks like.</description>
      <category>Agentic pentesting</category>
      <author>XEUS</author>
    </item>
    <item>
      <title>Proof of Exploit and Reproducible Findings: Why AppSec Triage Needs Them</title>
      <link>https://www.xeus.io/blog/proof-of-exploit-reproducible-findings</link>
      <guid isPermaLink="true">https://www.xeus.io/blog/proof-of-exploit-reproducible-findings</guid>
      <pubDate>Thu, 01 Oct 2026 00:00:00 GMT</pubDate>
      <description>A finding AppSec can trust is one your engineers can replay. Here is what proof of exploit should look like, what it is not, and how to demand it from vendors.</description>
      <category>Exploit paths</category>
      <author>XEUS</author>
    </item>
    <item>
      <title>Autonomous Pentesting vs Vulnerability Scanners: What Exploit Validation Actually Changes</title>
      <link>https://www.xeus.io/blog/autonomous-pentesting-vs-vulnerability-scanners-dast</link>
      <guid isPermaLink="true">https://www.xeus.io/blog/autonomous-pentesting-vs-vulnerability-scanners-dast</guid>
      <pubDate>Wed, 30 Sep 2026 00:00:00 GMT</pubDate>
      <description>Scanners flag candidates. Autonomous pentesting, done properly, attempts exploitation and returns reproducible proof. Here is how to tell them apart, including AI DAST.</description>
      <category>Exploit paths</category>
      <author>XEUS</author>
    </item>
    <item>
      <title>Autonomous Pentesting Platforms Compared: What Autonomous Actually Delivers</title>
      <link>https://www.xeus.io/blog/autonomous-pentesting-platforms-compared-what-autonomous-actually-delivers</link>
      <guid isPermaLink="true">https://www.xeus.io/blog/autonomous-pentesting-platforms-compared-what-autonomous-actually-delivers</guid>
      <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
      <description>Comparing autonomous pentesting platforms? Here is the buyer framework: exploit validation, human sign-off, retest, and delivery speed, not feature lists.</description>
      <category>Exploit paths</category>
      <author>XEUS</author>
    </item>
    <item>
      <title>No Mythos access? How to run frontier-class offensive testing without it</title>
      <link>https://www.xeus.io/blog/frontier-ai-pentest-without-mythos-access</link>
      <guid isPermaLink="true">https://www.xeus.io/blog/frontier-ai-pentest-without-mythos-access</guid>
      <pubDate>Mon, 21 Sep 2026 00:00:00 GMT</pubDate>
      <description>Claude Mythos is limited to vetted US orgs. What security leads outside that circle can do now with frontier-class AI offense and proven paths.</description>
      <category>Frontier AI offense</category>
      <author>XEUS</author>
    </item>
  </channel>
</rss>
